Re: External tables. Security concerns.

From: Brian Peasland <dba_at_nospam.peasland.net>
Date: Sat, 19 Aug 2006 15:30:45 GMT
Message-ID: <J494FE.5D5@igsrsparc2.er.usgs.gov>

DA Morgan wrote:
> artmt_at_hotmail.com wrote:

>> I am considering using external tables for my ETL processes.
>> The DBAs are telling me that their policy is not allow any access to
>> the file system via the database - due to security concerns. This
>> means no external tables, no directory objects, no utl_file.
>> Are their concerns valid?
>> Is there a way to use these features securely?
>>
>> Thanks
>> Art

>
> Yes and no. they are correct to not allow uncontrolled use of UTL_FILE
> but directory objects are harmless and the only real risk with an
> External Table would be you dumping GB of into a file and using too
> much disk.
>
> Most likely they don't understand the technology because if they did
> they would know that DIRECTORY OBJECTS are wholly internal to the
> database.

In addition, the DBA can create the directory object and then grant READ and WRITE permissions to other database users. So the DBA does have a lot of control over security of the directory object.

HTH,
Brian

-- 
===================================================================

Brian Peasland
dba_at_nospam.peasland.net
http://www.peasland.net

Remove the "nospam." from the email address to email me.


"I can give it to you cheap, quick, and good.
Now pick two out of the three" - Unknown

Received on Sat Aug 19 2006 - 10:30:45 CDT